kaatai

<p>KaaTai Consent Manager is a <strong>privacy-first cookie consent plugin for GDPR-compliant websites</strong>. It gives your visitors full control over cookies and tracking scripts — while keeping you compliant with the GDPR, ePrivacy, and (in Germany) DSGVO and TDDDG. The admin interface is <strong>fully available in English and German</strong>.</p>
<p>Instead of spreading thin across 100+ jurisdictions, KaaTai does one thing exceptionally well: <strong>clean, no-nonsense GDPR consent</strong> — backed by unusually deep coverage of German/DACH law (DSGVO, TDDDG, ePrivacy), among the strictest in Europe. That depth benefits every GDPR site: a curated cookie database, ready-made legal-text templates, vendor presets, and built-in compliance checks. Works on international sites today, with more localized presets on the way.</p>
<h4>Cookie Consent Banner</h4>
<ul>
<li>Customizable consent banner with 3 layouts: Bottom Bar, Centered Popup, Corner Box</li>
<li>All design settings free for all plans: colors, overlay, border radius, spacing, box shadow</li>
<li>Responsive design — works on desktop, tablet, and mobile</li>
<li>WCAG 2.1 compliant: ARIA roles, focus trap, keyboard navigation, semantic HTML</li>
<li>No jQuery dependency — lightweight vanilla JavaScript</li>
<li>Cache-safe: works correctly with all popular caching plugins</li>
</ul>
<h4>Content Blocking</h4>
<ul>
<li>Automatically blocks YouTube, Vimeo, Facebook, Instagram, and Spotify embeds until consent</li>
<li>Blocks Google Maps and OpenStreetMap iframes</li>
<li>Shows privacy-friendly placeholders with click-to-load buttons</li>
<li>MutationObserver detects and blocks dynamically injected content</li>
<li>Auto Script Blocker detects and blocks tracking scripts from third-party plugins (67 known services)</li>
</ul>
<h4>Consent Management</h4>
<ul>
<li>Google Consent Mode v2 — always enabled, sends proper signals to GTM, GA4, and Google Ads</li>
<li>Granular consent — visitors can accept/reject individual vendors, not just categories</li>
<li>5 cookie categories: Essential, Functional, Statistics, Marketing, Performance</li>
<li>Consent choices persist across sessions and can be withdrawn at any time</li>
<li>Consent logging with unique record IDs for GDPR Art. 7(1) compliance (36-month retention)</li>
<li>Global Privacy Control (GPC) — automatically honors browser-level privacy signals</li>
</ul>
<h4>Legal Text Generator</h4>
<ul>
<li>Impressum generator — all mandatory fields per German law (TMG/DDG)</li>
<li>Privacy policy generator — covers all 14 items required by GDPR Art. 13</li>
<li>Shortcodes: [kccm_impressum] and [kccm_datenschutz] for easy page integration</li>
<li>Language-specific shortcodes for multilingual sites (WPML/Polylang): [kccm_datenschutz_en], [kccm_datenschutz_de], [kccm_impressum_en], [kccm_impressum_de] — or the lang=”en|de” attribute</li>
<li>Data for responsible person (Verantwortlicher) stored locally — no external service needed</li>
</ul>
<h4>Vendor Registry</h4>
<ul>
<li>Pre-configured database of 66+ common services with accurate cookie descriptions</li>
<li>Google Analytics, Meta Pixel, Microsoft Clarity, YouTube, Google Maps, and many more</li>
<li>1-click install from the service catalog</li>
<li>Custom vendor support — add your own services with cookie details</li>
</ul>
<h4>Setup Wizard</h4>
<ul>
<li>4-step guided setup: General Settings, Responsible Person, Select Services, Banner Design</li>
<li>Live banner preview during setup</li>
<li>Works without an API key — no account required for basic features</li>
</ul>
<h4>Deep GDPR & DACH Expertise</h4>
<p>The cookie database, legal-text templates, and compliance checks are built around the GDPR and the especially strict German rules (DSGVO, TDDDG, ePrivacy) — so you get compliance depth that also covers the rest of the EU. The plugin is fully translatable and locale-aware: the admin UI ships in <strong>English and German</strong>, legal texts can be rendered per language, and more localized presets are being added.</p>
<h4>Integrations</h4>
<p>KaaTai Consent Manager works with the most popular WordPress plugins and services:</p>
<ul>
<li><strong>Analytics:</strong> Google Analytics, Google Tag Manager, Matomo, Piwik PRO, Microsoft Clarity, Plausible, Fathom</li>
<li><strong>Marketing:</strong> Meta Pixel (Facebook), Google Ads, Taboola, Outbrain, Awin, Tradedoubler</li>
<li><strong>Embeds:</strong> YouTube, Vimeo, Google Maps, OpenStreetMap, Facebook, Instagram, Spotify</li>
<li><strong>E-Commerce:</strong> WooCommerce (Checkout Banner mode, one-click setup)</li>
<li><strong>Chat & Support:</strong> Tidio, Crisp, Zendesk, Drift, LiveChat</li>
<li><strong>Security:</strong> Google reCAPTCHA, Cloudflare, hCaptcha</li>
<li><strong>Payments:</strong> PayPal, Klarna</li>
<li><strong>Other:</strong> HubSpot, Twitter/X Pixel, Snap Pixel, Gravatar, Site Kit by Google</li>
</ul>
<h4>Premium Features (optional SaaS)</h4>
<p>Connect to the <strong>KaaTai Consent Manager</strong> dashboard to unlock additional features. The SaaS integration is entirely optional — the plugin works fully standalone.</p>
<p>Pricing per domain, incl. 19% VAT:</p>
<p><strong>Free (0 EUR):</strong></p>
<ul>
<li>Cookie banner with all designs and layouts</li>
<li>Local consent logging</li>
<li>Vendor registry (4 vendors)</li>
<li>Content blocking (YouTube, Maps, etc.)</li>
<li>Google Consent Mode v2</li>
<li>Local cookie scanner — scan any single page, unlimited scans (dashboard sync once per day)</li>
<li>Privacy policy (DSE) generator (local)</li>
</ul>
<p><strong>Starter (1,90 EUR/month):</strong></p>
<ul>
<li>66+ vendor presets</li>
<li>Banner logo upload</li>
<li>Cookie scanner — automatic scan of your most important pages (up to 20, from your navigation menus)</li>
<li>Impressum generator (via SaaS)</li>
<li>Auto script blocker</li>
<li>White-label (remove branding)</li>
<li>Ticket support</li>
</ul>
<p><strong>Business (2,49 EUR/month):</strong></p>
<ul>
<li>SaaS legal texts: dashboard archive, version history, DE/EN sync</li>
<li>Playwright deep scan</li>
<li>Audit scanner with compliance score</li>
<li>WooCommerce presets</li>
<li>Central consent logging</li>
<li>Multi-domain support</li>
</ul>
<p><strong>Pro (2,90 EUR/month):</strong></p>
<ul>
<li>Analytics dashboard (consent trends, geo data)</li>
<li>Conversion impact calculator</li>
</ul>
<h4>Useful Links</h4>
<ul>
<li><a href="https://consent-management.kaatai.de" rel="nofollow ugc">Plugin Homepage</a></li>
<li><a href="https://consent-management.kaatai.de/docs" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://wordpress.org/support/plugin/kaatai-consent-manager/" rel="ugc">Support</a></li>
<li><a href="https://github.com/kahramanatalay/consent-by-kaatai" rel="nofollow ugc">GitHub</a></li>
<li><a href="https://translate.wordpress.org/projects/wp-plugins/kaatai-consent-manager" rel="nofollow ugc">Translate KaaTai Consent Manager</a></li>
</ul>
<h4>About KaaTai</h4>
<p>KaaTai Consent Manager is developed by <strong>KaaTai</strong> in Germany. We believe that GDPR compliance should be simple, affordable, and accessible to every website owner — not just enterprises with legal departments. Our goal is to be the best cookie consent solution for the German-speaking market.</p>
<h3>External Services</h3>
<h4>Third-party service references (detection patterns, NOT dependencies)</h4>
<p>This plugin is a <strong>Consent Management Tool</strong>. Its purpose is to detect, categorize, and block third-party tracking scripts until the visitor gives consent. The plugin contains a database of known tracking services with their hostnames and script patterns.</p>
<p>These references are <strong>identification patterns only</strong>. The plugin does <strong>not</strong> load, connect to, or transmit any data to these services. It uses the patterns to recognize scripts already present on your site and block them until consent is granted.</p>
<p>The following services are referenced as detection patterns:</p>
<ul>
<li><strong>Google Analytics</strong> — detected and blocked until “statistics” consent. <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Google Tag Manager</strong> — detected and blocked until “marketing” consent. <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Meta Pixel (Facebook)</strong> — detected and blocked until “marketing” consent. <a href="https://www.facebook.com/privacy/policy/" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.facebook.com/legal/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Cloudflare</strong> — detected and categorized as “essential”. <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.cloudflare.com/website-terms/" rel="nofollow ugc">Terms</a></li>
<li><strong>Google reCAPTCHA</strong> — detected and categorized as “functional”. <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Piwik PRO / Matomo</strong> — detected and blocked until “statistics” consent. <a href="https://piwik.pro/privacy-policy/" rel="nofollow ugc">Privacy Policy</a></li>
<li><strong>Microsoft Clarity</strong> — detected and blocked until “statistics” consent. <a href="https://privacy.microsoft.com/privacystatement" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.microsoft.com/licensing/terms" rel="nofollow ugc">Terms</a></li>
</ul>
<p>No data is sent to any of these services by this plugin.</p>
<h4>KaaTai Consent Manager SaaS (optional, requires API key)</h4>
<p>This plugin optionally connects to servers operated by <strong>KaaTai</strong> (<code>consent-management.kaatai.de</code>). These connections are <strong>only made when the site administrator has entered an API key</strong>. Without an API key, no external connections occur.</p>
<p><strong>Service:</strong> KaaTai Consent Manager SaaS<br />
<strong>Service URL:</strong> <a href="https://consent-management.kaatai.de" rel="nofollow ugc">https://consent-management.kaatai.de</a><br />
<strong>What it does:</strong> License validation, consent analytics, cookie scanner, service library, legal text generation.<br />
<strong>What data is sent:</strong> API key, domain, consent configuration, anonymized consent events (no PII), scan results.<br />
<strong>Privacy Policy:</strong> <a href="https://consent-management.kaatai.de/datenschutz" rel="nofollow ugc">https://consent-management.kaatai.de/datenschutz</a><br />
<strong>Terms of Service:</strong> <a href="https://consent-management.kaatai.de/agb" rel="nofollow ugc">https://consent-management.kaatai.de/agb</a></p>
<h4>Data transmitted when an API key is configured</h4>
<ol>
<li><strong>License Validation</strong> (<code>/api/license/validate</code>) — API key sent to verify license status and features. Cached for 24 hours.</li>
<li><strong>Config Sync</strong> (<code>/api/consent/config</code>) — Consent configuration sent when settings are saved. No personal visitor data.</li>
<li><strong>Consent Events</strong> (<code>/api/consent/event</code>) — Anonymized consent events via sendBeacon(). Contains: action, categories, hashed session ID, policy hash. No PII.</li>
<li><strong>Legal Texts</strong> (<code>/api/legal/impressum</code>, <code>/api/legal/privacy-policy</code>) — Legal text content fetched from SaaS. Cached for 24 hours.</li>
<li><strong>Newsletter</strong> (<code>/api/newsletter/subscribe-by-key</code>) — Only when administrator clicks “Subscribe”.</li>
<li><strong>Scanner</strong> (<code>/api/scan/results</code>) — Scan results synced to SaaS dashboard (Business plan+).</li>
<li><strong>Cookie Definitions</strong> (<code>/api/cookies/definitions</code>) — Cookie descriptions fetched for Service Library.</li>
</ol>
<h4>Data stored on the external server</h4>
<ul>
<li>License/API key association and plan details</li>
<li>Aggregated consent statistics (no personal data)</li>
<li>Consent configuration snapshots</li>
<li>Scan results (URLs and detected services)</li>
</ul>
<h4>User consent</h4>
<p>The site administrator gives explicit consent by entering and saving an API key. The API key can be removed at any time to stop all external communication.</p>


KaaTai Consent Manager

GDPR cookie consent made simple. Consent Mode v2, cookie scanner & legal-text generator. Deep DSGVO expertise, admin UI in English & German.

vgdevsolutions

<p><strong>VGDev Cookie Banner for Consent Mode v2</strong> is a lightweight, self-hosted GDPR cookie consent solution that integrates natively with Google Consent Mode v2, Google Tag Manager (GTM) and Google Analytics 4 (GA4).</p>
<p>All consent signals start as <code>denied</code> and are updated in real time based on the visitor’s choices — fully compliant with Google’s requirements for EU markets.</p>
<h4>Key Features</h4>
<ul>
<li>✅ <strong>Google Consent Mode v2</strong> — all 7 consent signals managed automatically</li>
<li>✅ <strong>Google Tag Manager (GTM)</strong> — head snippet + body noscript injected automatically</li>
<li>✅ <strong>Google Analytics 4 (GA4)</strong> — standalone gtag.js support (when GTM is not used)</li>
<li>✅ <strong>GDPR Compliant</strong> — consent defaults to denied before any tracking occurs</li>
<li>✅ <strong>Multilingual Privacy Policy</strong> — set a different privacy policy URL per language</li>
<li>✅ <strong>29 built-in languages</strong> — auto-detected via WPML, Polylang or WordPress locale</li>
<li>✅ <strong>Performance Mode</strong> — lazy loads the banner after user interaction (boosts PageSpeed score)</li>
<li>✅ <strong>Force Consent</strong> — block the page until the user makes a choice</li>
<li>✅ <strong>Fully customizable</strong> — colors, layout, position, floating button, and more</li>
<li>✅ <strong>Self-hosted</strong> — no external consent management platform needed</li>
<li>✅ <strong>Lightweight</strong> — no jQuery dependency for the front-end script</li>
</ul>
<h4>Google Consent Mode v2 Signals</h4>
<p>The plugin manages all required consent signals:</p>
<ul>
<li><code>ad_storage</code></li>
<li><code>ad_user_data</code></li>
<li><code>ad_personalization</code></li>
<li><code>analytics_storage</code></li>
<li><code>functionality_storage</code></li>
<li><code>personalization_storage</code></li>
<li><code>security_storage</code></li>
</ul>
<h4>Consent Categories</h4>
<ul>
<li><strong>Necessary</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>security_storage</code></li>
<li><strong>Functionality</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>functionality_storage</code>, <code>personalization_storage</code>, <code>security_storage</code></li>
<li><strong>Analytics</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>analytics_storage</code>, <code>security_storage</code></li>
<li><strong>Marketing</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>ad_storage</code>, <code>ad_user_data</code>, <code>ad_personalization</code>, <code>personalization_storage</code></li>
</ul>
<h4>Multilingual Support</h4>
<p>Works out of the box with WPML, Polylang and WordPress locale. You can also set per-language privacy policy URLs so visitors always see the privacy page in their own language.</p>
<h4>Performance Mode</h4>
<p>Enable lazy loading to load the cookie banner only after the first user interaction (scroll, click, mouse move or touch). Since Google PageSpeed Insights does not simulate interactions, the banner will not appear in the performance audit — significantly improving your Core Web Vitals score.</p>
<h4>Built-in Languages</h4>
<p>English, Greek, German, French, Spanish, Italian, Portuguese, Dutch, Polish, Czech, Slovak, Hungarian, Romanian, Bulgarian, Croatian, Serbian, Slovenian, Estonian, Latvian, Lithuanian, Finnish, Swedish, Danish, Norwegian, Russian, Ukrainian, Chinese, Japanese, Arabic.</p>
<h3>External Services</h3>
<p>This plugin connects to external services provided by Google when the site administrator configures a Google Tag Manager (GTM) Container ID or a Google Analytics 4 (GA4) Measurement ID in the plugin settings.</p>
<h4>Google Tag Manager (GTM)</h4>
<p>When a GTM Container ID is entered in the plugin settings, the plugin loads the Google Tag Manager JavaScript snippet from Google’s servers. This happens on every front-end page load.</p>
<ul>
<li><strong>What it does:</strong> Loads the GTM container script so that tags configured inside GTM (analytics, advertising, etc.) can fire according to consent status.</li>
<li><strong>What data is sent:</strong> The GTM Container ID and standard browser information (IP address, user agent, page URL, referrer) are sent to Google’s servers when the script is loaded. Additional data may be collected depending on the tags configured within GTM by the site administrator.</li>
<li><strong>When it is sent:</strong> On every front-end page load, after the consent defaults have been set.</li>
<li><strong>Service provider:</strong> Google LLC</li>
<li><strong>Terms of Service:</strong> <a href="https://www.google.com/analytics/terms/tag-manager/" rel="nofollow ugc">https://www.google.com/analytics/terms/tag-manager/</a></li>
<li><strong>Privacy Policy:</strong> <a href="https://policies.google.com/privacy" rel="nofollow ugc">https://policies.google.com/privacy</a></li>
</ul>
<h4>Google Analytics 4 (GA4) via gtag.js</h4>
<p>When a GA4 Measurement ID is entered and no GTM Container ID is configured, the plugin loads the Google Analytics gtag.js script from Google’s servers.</p>
<ul>
<li><strong>What it does:</strong> Loads the GA4 measurement script to collect website analytics data (page views, events, etc.) according to consent status.</li>
<li><strong>What data is sent:</strong> The GA4 Measurement ID and standard browser information (IP address, user agent, page URL, referrer) are sent to Google’s servers. Analytics data (page views, session data, events) is only collected according to the visitor’s consent choices.</li>
<li><strong>When it is sent:</strong> On every front-end page load, after the consent defaults have been set. Actual analytics data collection depends on user consent.</li>
<li><strong>Service provider:</strong> Google LLC</li>
<li><strong>Terms of Service:</strong> <a href="https://marketingplatform.google.com/about/analytics/terms/us/" rel="nofollow ugc">https://marketingplatform.google.com/about/analytics/terms/us/</a></li>
<li><strong>Privacy Policy:</strong> <a href="https://policies.google.com/privacy" rel="nofollow ugc">https://policies.google.com/privacy</a></li>
</ul>
<p><strong>Note:</strong> No data is sent to any external service by this plugin unless the site administrator explicitly configures a GTM Container ID or GA4 Measurement ID. The cookie consent preferences are stored locally in the visitor’s browser and are not transmitted to any external server.</p>


VGDev Cookie Banner for Consent Mode v2

GDPR cookie consent banner with Google Consent Mode v2, GTM & GA4 integration. Lightweight, self-hosted, multilingual, fully customizable.

KaaTai Consent Manager vs VGDev Cookie Banner for Consent Mode v2